last executing test programs: 15.181406383s ago: executing program 1 (id=812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000200)='./dev\x00', 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', 0x0, &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 15.181052443s ago: executing program 3 (id=813): sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x8) write(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x4}) r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x900, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f0000000740)="14b2eaa8e735cb8ce361abf7a1daa22f4451c1758ce6f3c3d9b716c87d3f8c0be6d7fd984064ae4d594c56f145dfa1fd23ae347eb4758a6fba1a219e5a8be640734bbf09eda0eca4f60d4fa9288828f76a4069fbd53dca6c8cf6cb95d100a8e3cea28fbd5f52577fec83440f02afa131a4edc6fbf029cf43c4bc2efd13e0537d9603cf48e6a7e5f51e6e735212a54a3f3bd8a16087a386e7385309ae5cd1fe90320fcb9e6017dc6f23cd2899afc2cac71e7428b6225226087fd5847301eed022e33e3ea3f69a0f59a47d539205adb619595ad69aad5aac7870d3f674ceb9bb", 0xf000}, {0x0, 0x45}], 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x141081, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x28}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x28, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x28}}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xe0, '\x00', r5, @fallback=0x38}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000300)={0x0, 0x0, {0xfffffffe, 0x63, 0x300e, 0x0, 0x0, 0x0, 0x0, 0x5}}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) 14.45797347s ago: executing program 1 (id=815): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$nci(0xffffff9c, 0x0, 0x2, 0x0) write$nci(r0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000680)=""/240) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, 0x0, 0x0) 11.911172094s ago: executing program 3 (id=819): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) writev(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) 9.228683725s ago: executing program 4 (id=823): openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="13000000010203", 0x7}, {&(0x7f0000000140)="e82ce69ab868c5", 0x7}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0xfffffffffffffc9e, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x19, 0x10, 0x8, 0x2, 0x0}}, 0x10) ioctl$FE_SET_FRONTEND_TUNE_MODE(0xffffffffffffffff, 0x6f51, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r4, @ANYBLOB="170900000000ffdbdf25010000000800c521725d28192c1800ac1414aa060002000100000008000a00010000fee2057d6eb26f900008000900fffffffe08"], 0x44}}, 0x4) 8.115426979s ago: executing program 3 (id=825): syz_mount_image$squashfs(&(0x7f0000000600), &(0x7f00000002c0)='./file1\x00', 0x200802, &(0x7f0000000280)=ANY=[], 0x9, 0x20e, &(0x7f0000001940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) 8.106706541s ago: executing program 1 (id=826): unshare(0x22020600) socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x10000000) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0xc0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041007369770014003300776c616e30000000000000000000000012e0531f7ad3f42c20e32eb771db8200a8a19e6053163f3d42"], 0x38}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000041401000000000002000000080001000000000008000300"], 0x20}}, 0x0) 8.002177139s ago: executing program 4 (id=827): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000340)={{0x0, @broadcast, 0x4e22, 0x0, 'none\x00', 0x1c, 0x4, 0x35}, {@loopback, 0x4e22, 0x4, 0x6, 0x380, 0x9ba}}, 0x44) fsopen(0x0, 0x1) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, &(0x7f0000000040)=0x56) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f0000000580)={[{@grpjquota}, {@dioread_lock}, {@delalloc}, {@commit}]}, 0xfe, 0x258, &(0x7f0000000c40)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) rt_sigqueueinfo(r0, 0x34, &(0x7f00000000c0)={0x21, 0xfff, 0xe}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x820008, 0x0, 0xda, 0x0, &(0x7f0000000280)) openat(0xffffffffffffff9c, 0x0, 0x101842, 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000000bc0)={{0xffffffffffffffff, &(0x7f0000000180)='%@:\\*\x00', 0x400000, &(0x7f0000000280)={@_ha_fsid={[0x80000001, 0x886c]}, {0x5, 0x4, 0x9, 0x6}}, 0x1, 0x0, &(0x7f0000000400)}, {[0x67, 0x56c, 0x3, 0x3]}, 0x4, 0xe5, &(0x7f0000000ac0)=""/229}) syz_usb_disconnect(0xffffffffffffffff) 7.99885627s ago: executing program 0 (id=828): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x11) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x3a, 0x43, 0x0, 0x0) close(r4) 7.869614735s ago: executing program 3 (id=829): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffffff, 0x0, 0x88082, 0x52) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, &(0x7f0000000300)=""/58, 0x0, 0x3a, 0x0, 0x1, 0x10000, @value=r0}, 0x28) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x2f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,nodfs\x00') 6.418892841s ago: executing program 2 (id=830): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) inotify_init1(0x1000) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4840}, 0x80) mount(0x0, 0x0, 0x0, 0x50044, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) landlock_create_ruleset(0x0, 0x0, 0x3) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 5.39333598s ago: executing program 1 (id=831): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0500000000000000000021"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 4.527666986s ago: executing program 0 (id=832): fsopen(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x40010) recvfrom(r2, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xa) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) msgsnd(0x0, &(0x7f0000000400)=ANY=[@ANYRES8, @ANYRES32, @ANYRESDEC=r1, @ANYBLOB, @ANYRESHEX], 0x8, 0x0) setgid(0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4) 4.245796813s ago: executing program 2 (id=833): setresuid(0x0, 0xee01, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x2000073d, &(0x7f0000e68000)={0x2, 0x4e24, @empty}, 0x10) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b8400feffffffffffff000000000017030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94acc000000000000000000000051d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 4.180934781s ago: executing program 4 (id=834): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setns(0xc9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000073113900000000008510000002000000040000007680000095100000000000009500a50500000000035ae6e09205fea7968401add90abe94d9c543d93d79d97ea252ebed35121cc64ce23cb475aa16fd48d1cd81ac1c53666da3128e6fe64e399bacc7c345f41a10e250451af01d4afc78c2f0f711a370cb0e7dbe9f020f7f5f78ab9123e04c6aaa84901f90da8fa94a112e384a4dbeade593fe8b05c799c7c4182234d74a87ed264c4a6d2a3f76d7d8afd41574"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 4.116219279s ago: executing program 3 (id=835): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) writev(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) 3.258748622s ago: executing program 1 (id=836): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$nci(0xffffff9c, 0x0, 0x2, 0x0) write$nci(r0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000680)=""/240) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, 0x0, 0x0) 3.227828291s ago: executing program 2 (id=837): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) 3.226604961s ago: executing program 4 (id=838): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./bus\x00', 0xdf) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) listen(0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x50) r4 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x145322) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) syz_emit_vhci(0x0, 0x7) syz_emit_vhci(0x0, 0x6) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80400) gettid() 3.177241754s ago: executing program 0 (id=839): socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x376, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200000240b, 0x3f, 0x9, 0x0, 0x80, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x1010000000000, 0x0, 0x0, 0x100000000003f89, 0x0, 0x7fffffffffffffff}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000d40)={0x0, 0x7}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='1', 0x1) close(r3) r5 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000600)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x5, 0x2, 0x20, 0xa0, 0x6c}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x40000, 0x1000000000004, 0x2, 0xa78a}, 0xfffffffe, 0x0, 0x2, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3506, 0x4, 0x2, 0x2}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000000)={[{@grpjquota}]}, 0x1, 0x603, &(0x7f0000000700)="$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") 2.917441075s ago: executing program 2 (id=840): keyctl$set_reqkey_keyring(0xe, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x141c42) writev(r3, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0)}], 0x3) 1.940365892s ago: executing program 0 (id=841): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109142, 0x5) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f00000002c0)=0xfffffeff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 1.937210063s ago: executing program 2 (id=842): mkdirat(0xffffffffffffff9c, 0x0, 0x1df) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x80, 0x0, &(0x7f0000001080)) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000001040)=0xdc, 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x8100, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x18015) r1 = socket$inet6(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/block/sda/device/scsi_disk/0:0:0:0/max_write_same_blocks\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f", 0x1a, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) 576.365663ms ago: executing program 4 (id=843): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) inotify_init1(0x1000) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4840}, 0x80) mount(0x0, 0x0, 0x0, 0x50044, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) landlock_create_ruleset(0x0, 0x0, 0x3) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 575.564984ms ago: executing program 2 (id=844): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x11) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x3a, 0x43, 0x0, 0x0) close(r3) 574.703254ms ago: executing program 3 (id=845): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 551.99825ms ago: executing program 0 (id=846): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0500000000000000000021"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 500.683494ms ago: executing program 0 (id=847): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffffff, 0x0, 0x88082, 0x52) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, &(0x7f0000000300)=""/58, 0x0, 0x3a, 0x0, 0x1, 0x10000, @value=r0}, 0x28) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x2f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,nodfs\x00') 301.398808ms ago: executing program 1 (id=848): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") r0 = open(&(0x7f0000000280)='./file1\x00', 0x4827e, 0x20) fallocate(r0, 0x1, 0x0, 0x87fffff) open(&(0x7f0000000140)='./proc\x00', 0x1a7843, 0x21) 0s ago: executing program 4 (id=849): fsopen(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x40010) recvfrom(r2, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xa) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) msgsnd(0x0, &(0x7f0000000400)=ANY=[@ANYRES8, @ANYRES32, @ANYRESDEC=r1, @ANYBLOB, @ANYRESHEX], 0x8, 0x0) setgid(0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4) kernel console output (not intermixed with test programs): 310258][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.318260][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.326954][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.336896][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.345971][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.355278][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.365043][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.373976][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.382380][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.405412][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.422119][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.432165][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.442133][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.453484][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.462649][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.471554][ T665] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.478661][ T665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.486882][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.496226][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.505031][ T665] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.512155][ T665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.520157][ T4193] device veth0_vlan entered promiscuous mode [ 68.534926][ T4193] device veth1_vlan entered promiscuous mode [ 68.550832][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.558703][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.567735][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.578036][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.587562][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.596786][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.608140][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.616131][ T4230] Bluetooth: hci0: command 0x041b tx timeout [ 68.633833][ T4197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.645088][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.651363][ T4230] Bluetooth: hci1: command 0x041b tx timeout [ 68.667918][ T4230] Bluetooth: hci3: command 0x041b tx timeout [ 68.674390][ T4230] Bluetooth: hci2: command 0x041b tx timeout [ 68.674464][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.691228][ T4228] Bluetooth: hci4: command 0x041b tx timeout [ 68.697372][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.707123][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.716661][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.725811][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.738895][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.750257][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.760065][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.775447][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.786623][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.800694][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.809115][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.816953][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.827824][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.836058][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.844645][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.853956][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.880928][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.909120][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.933005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.942935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.960766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.987226][ T4193] device veth0_macvtap entered promiscuous mode [ 69.011003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.026194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.038929][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.054768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.066139][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.086287][ T4186] device veth0_vlan entered promiscuous mode [ 69.097149][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.111349][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.120027][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.146956][ T4186] device veth1_vlan entered promiscuous mode [ 69.159078][ T4193] device veth1_macvtap entered promiscuous mode [ 69.182754][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.196954][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.206185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.222115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.230298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.244828][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.273935][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.298362][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.327917][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.337437][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.346677][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.355830][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.364390][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.381368][ T4186] device veth0_macvtap entered promiscuous mode [ 69.398024][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.412940][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.420009][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.429864][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.438984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.448447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.458631][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.482304][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.502073][ T4186] device veth1_macvtap entered promiscuous mode [ 69.519059][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.528231][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.543573][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.556600][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.565964][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.578124][ T4193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.588607][ T4193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.597742][ T4193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.606928][ T4193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.637498][ T4185] device veth0_vlan entered promiscuous mode [ 69.667738][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.677272][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.693129][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.705858][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.717405][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.729942][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.741553][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.766459][ T4185] device veth1_vlan entered promiscuous mode [ 69.773849][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.781797][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.789605][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.798936][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.810983][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.832577][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.844176][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.864727][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.879064][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.899240][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.908881][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.923397][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.934878][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.945512][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.954961][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.973493][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.982299][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.991826][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.000045][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.036017][ T4185] device veth0_macvtap entered promiscuous mode [ 70.055593][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.064734][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.073187][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.091796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.100355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.119246][ T4192] device veth0_vlan entered promiscuous mode [ 70.151015][ T4185] device veth1_macvtap entered promiscuous mode [ 70.175198][ T4192] device veth1_vlan entered promiscuous mode [ 70.190037][ T4197] device veth0_vlan entered promiscuous mode [ 70.202499][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.212014][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.219994][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.229157][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.238218][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.246492][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.263974][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.277350][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.296890][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.305818][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.316621][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.327786][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.339810][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.356500][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.367287][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.377958][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.389519][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.401310][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.409377][ T4197] device veth1_vlan entered promiscuous mode [ 70.416786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.425265][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.434338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.445031][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.455073][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.464614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.473441][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.498256][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.509226][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.518043][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.529684][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.544968][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.554110][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.573156][ T4192] device veth0_macvtap entered promiscuous mode [ 70.628779][ T4192] device veth1_macvtap entered promiscuous mode [ 70.645019][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.665579][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.679128][ T4233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.688163][ T4233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.695955][ T4230] Bluetooth: hci3: command 0x040f tx timeout [ 70.702272][ T4230] Bluetooth: hci1: command 0x040f tx timeout [ 70.722145][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.731418][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.739516][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.747785][ T4230] Bluetooth: hci0: command 0x040f tx timeout [ 70.759331][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.767722][ T4228] Bluetooth: hci4: command 0x040f tx timeout [ 70.768257][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.774737][ T4228] Bluetooth: hci2: command 0x040f tx timeout [ 70.791399][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.799972][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.812409][ T4197] device veth0_macvtap entered promiscuous mode [ 70.825094][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.835943][ T665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.854012][ T665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.861155][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.872864][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.883553][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.895772][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.907116][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.919513][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.944945][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.955771][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.968311][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.984639][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.999039][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.013769][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.023752][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.034406][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.044350][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.054881][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.066290][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.080469][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.089467][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.109956][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.119863][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.149672][ T4197] device veth1_macvtap entered promiscuous mode [ 71.166941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.172702][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.181880][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.185054][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.244508][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.270650][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.278879][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.298914][ T4263] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.302927][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.344898][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.360326][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.370646][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.381359][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.391245][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.402953][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.414967][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.428776][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.437677][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.447449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.467977][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.499083][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.520348][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.536873][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.547320][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.558125][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.570607][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.585767][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.598874][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.615770][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.635792][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.653112][ T4197] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.664141][ T4197] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.674532][ T4197] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.684303][ T4197] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.693612][ T1111] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.719820][ T4233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.739177][ T4233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.759713][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.773171][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.793008][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.807444][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.903600][ T665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.918335][ T665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.926412][ T4269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 71.942920][ T4269] device netdevsim0 entered promiscuous mode [ 71.952034][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.960178][ T4245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.969351][ T4245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.984081][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.032872][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.043497][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.053107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.113796][ T4276] loop2: detected capacity change from 0 to 1024 [ 72.200943][ T1111] usb 1-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 72.225035][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 72.244275][ T4227] psmouse serio2: Failed to reset mouse on : -5 [ 72.256949][ T1111] usb 1-1: Product: syz [ 72.269178][ T1111] usb 1-1: Manufacturer: syz [ 72.348010][ T4278] autofs4:pid:4278:autofs_fill_super: called with bogus options [ 72.472681][ T4286] loop3: detected capacity change from 0 to 16 [ 72.516598][ T4286] erofs: (device loop3): mounted with root inode @ nid 36. [ 72.761584][ T4228] Bluetooth: hci0: command 0x0419 tx timeout [ 72.773999][ T4228] Bluetooth: hci1: command 0x0419 tx timeout [ 72.782928][ T4228] Bluetooth: hci3: command 0x0419 tx timeout [ 72.792092][ T1111] scsi host1: uas [ 72.851618][ T4261] Bluetooth: hci2: command 0x0419 tx timeout [ 72.857861][ T4261] Bluetooth: hci4: command 0x0419 tx timeout [ 72.989582][ T4261] usb 1-1: USB disconnect, device number 2 [ 72.995702][ C1] usb 1-1: stat urb: status -71 [ 72.996121][ C1] usb 1-1: cmd cmplt err -71 [ 73.011029][ T4261] scsi 1:0:0:0: tag#0 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 73.018994][ T4261] scsi 1:0:0:0: tag#0 CDB: Inquiry 12 00 00 00 24 00 [ 74.450410][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 74.470398][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 74.480396][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 74.490402][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 74.500398][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 74.510395][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 74.587189][ T4304] loop0: detected capacity change from 0 to 32768 [ 74.714359][ T4315] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 75.312225][ T4304] ======================================================= [ 75.312225][ T4304] WARNING: The mand mount option has been deprecated and [ 75.312225][ T4304] and is ignored by this kernel. Remove the mand [ 75.312225][ T4304] option from the mount to silence this warning. [ 75.312225][ T4304] ======================================================= [ 75.394954][ T4304] JBD2: Ignoring recovery information on journal [ 76.512600][ T4304] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 76.690903][ T4227] misc userio: Buffer overflowed, userio client isn't keeping up [ 76.738960][ T26] audit: type=1800 audit(1790781000.087:2): pid=4304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.12" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 77.972594][ T4227] input: PS/2 Generic Mouse as /devices/serio2/input/input5 [ 78.044610][ T4193] ocfs2: Unmounting device (7,0) on (node local) [ 78.230528][ T4227] psmouse serio2: Failed to enable mouse on [ 78.298622][ T26] audit: type=1326 audit(1790781001.647:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4334 comm="syz.2.21" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e5f4c8159 code=0x0 [ 78.702724][ T4349] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 78.713895][ T4349] loop4: detected capacity change from 0 to 128 [ 80.560383][ C1] sched: RT throttling activated [ 80.586083][ T4349] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,delalloc,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 80.602875][ T4349] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 82.289769][ T4359] device bridge1 entered promiscuous mode [ 82.736365][ T4370] loop0: detected capacity change from 0 to 16 [ 83.985522][ T4370] erofs: (device loop0): mounted with root inode @ nid 36. [ 84.029899][ T4368] x_tables: unsorted entry at hook 3 [ 84.230457][ T4227] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 84.243160][ T4378] loop4: detected capacity change from 0 to 512 [ 84.306342][ T4378] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 84.330598][ T4378] EXT4-fs (loop4): Unrecognized mount option "fsname=/" or missing value [ 84.800639][ T4227] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 84.830771][ T4227] usb 3-1: config 0 has no interface number 0 [ 85.506176][ T4227] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 85.771124][ T4227] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 85.820385][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 85.840385][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 85.850393][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 85.860399][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 85.969094][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.010044][ T4403] atomic_op ffff88805876d998 conn xmit_atomic 0000000000000000 [ 86.057132][ T4227] usb 3-1: Product: syz [ 86.100318][ T4227] usb 3-1: Manufacturer: syz [ 86.151078][ T4227] usb 3-1: SerialNumber: syz [ 86.246695][ T4227] usb 3-1: config 0 descriptor?? [ 86.412939][ T4227] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 86.539345][ T1324] cfg80211: failed to load regulatory.db [ 86.721105][ T4227] usb 3-1: USB disconnect, device number 2 [ 86.760609][ T4227] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 86.783499][ T4376] loop1: detected capacity change from 0 to 32768 [ 86.916907][ T4376] JBD2: Ignoring recovery information on journal [ 87.084226][ T4376] JBD2: recovery failed [ 87.423789][ T4376] (syz.1.32,4376,0):ocfs2_journal_load:1106 ERROR: Failed to load journal! [ 88.033242][ T4376] (syz.1.32,4376,0):ocfs2_check_volume:2435 ERROR: ocfs2 journal load failed! -5 [ 88.090444][ T4376] (syz.1.32,4376,0):ocfs2_check_volume:2491 ERROR: status = -5 [ 88.139178][ T4376] (syz.1.32,4376,0):ocfs2_mount_volume:1824 ERROR: status = -5 [ 88.170488][ T23] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 88.206679][ T4376] (syz.1.32,4376,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 88.760682][ T23] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 88.856925][ T23] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x3 has invalid maxpacket 513, setting to 64 [ 88.968668][ T23] usb 5-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 89.080812][ T23] usb 5-1: config 1 interface 0 has no altsetting 0 [ 89.142541][ T4424] loop1: detected capacity change from 0 to 512 [ 89.161018][ T23] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.190316][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 89.198587][ T23] usb 5-1: SerialNumber: syz [ 89.220728][ T4408] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 89.228272][ T4408] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 89.283179][ T4424] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 89.293286][ T4424] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 89.396302][ T4407] loop3: detected capacity change from 0 to 32768 [ 89.408258][ T4424] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 89.465931][ T4408] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 89.507591][ T4424] EXT4-fs error (device loop1): ext4_orphan_get:1436: comm syz.1.47: bad orphan inode 131083 [ 89.540308][ T4408] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 89.565816][ T4424] EXT4-fs (loop1): mounted filesystem without journal. Opts: nomblk_io_submit,journal_dev=0x00000000000003f2,noload,,errors=continue. Quota mode: none. [ 89.587247][ T4407] JBD2: Ignoring recovery information on journal [ 89.664712][ T4407] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 89.879622][ T4186] ocfs2: Unmounting device (7,3) on (node local) [ 89.899062][ T4433] loop1: detected capacity change from 0 to 512 [ 89.931454][ T4433] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 89.950518][ T4433] EXT4-fs (loop1): Unrecognized mount option "fsname=/" or missing value [ 90.004183][ T4437] FAULT_INJECTION: forcing a failure. [ 90.004183][ T4437] name failslab, interval 1, probability 0, space 0, times 1 [ 90.022227][ T4437] CPU: 1 PID: 4437 Comm: syz.0.49 Not tainted syzkaller #0 [ 90.029474][ T4437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.039564][ T4437] Call Trace: [ 90.042865][ T4437] [ 90.045832][ T4437] dump_stack_lvl+0x188/0x250 [ 90.050560][ T4437] ? show_regs_print_info+0x20/0x20 [ 90.055795][ T4437] ? load_image+0x410/0x410 [ 90.060335][ T4437] ? __might_sleep+0xf0/0xf0 [ 90.064947][ T4437] ? __lock_acquire+0x7b50/0x7b50 [ 90.070006][ T4437] should_fail+0x383/0x4b0 [ 90.074470][ T4437] should_failslab+0x5/0x20 [ 90.079000][ T4437] slab_pre_alloc_hook+0x51/0xc0 [ 90.083968][ T4437] ? v9fs_session_init+0xf7/0x1770 [ 90.089134][ T4437] __kmalloc_track_caller+0x69/0x330 [ 90.094466][ T4437] ? v9fs_session_init+0xf7/0x1770 [ 90.099619][ T4437] kstrdup+0x32/0x70 [ 90.103539][ T4437] v9fs_session_init+0xf7/0x1770 [ 90.108527][ T4437] ? v9fs_show_options+0x610/0x610 [ 90.113686][ T4437] v9fs_mount+0x72/0x850 [ 90.117963][ T4437] legacy_get_tree+0xe6/0x180 [ 90.122674][ T4437] ? trace_xrep_findroot_block+0x1f0/0x1f0 [ 90.128528][ T4437] vfs_get_tree+0x88/0x270 [ 90.132977][ T4437] do_new_mount+0x247/0xa40 [ 90.137520][ T4437] __se_sys_mount+0x2e3/0x3d0 [ 90.142232][ T4437] ? __x64_sys_mount+0xc0/0xc0 [ 90.147024][ T4437] ? lockdep_hardirqs_on+0x94/0x140 [ 90.152249][ T4437] ? __x64_sys_mount+0x1c/0xc0 [ 90.157055][ T4437] do_syscall_64+0x4c/0xa0 [ 90.161499][ T4437] ? clear_bhb_loop+0x30/0x80 [ 90.166204][ T4437] ? clear_bhb_loop+0x30/0x80 [ 90.170914][ T4437] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.176837][ T4437] RIP: 0033:0x7fdb03e82159 [ 90.181298][ T4437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.200942][ T4437] RSP: 002b:00007fdb020da028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 90.209378][ T4437] RAX: ffffffffffffffda RBX: 00007fdb04109fa0 RCX: 00007fdb03e82159 [ 90.217381][ T4437] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000000000000000 [ 90.225382][ T4437] RBP: 00007fdb03f1906b R08: 0000200000000480 R09: 0000000000000000 [ 90.233420][ T4437] R10: 0000000000200080 R11: 0000000000000246 R12: 0000000000000000 [ 90.241430][ T4437] R13: 00007fdb0410a038 R14: 00007fdb04109fa0 R15: 00007fff26e349d8 [ 90.249456][ T4437] [ 90.978419][ T23] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 91.079987][ T23] usb 5-1: USB disconnect, device number 2 [ 91.121564][ T23] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 91.480719][ T4449] IPv6: Can't replace route, no match found [ 91.581551][ T4449] IPv6: Can't replace route, no match found [ 93.063869][ T4486] loop2: detected capacity change from 0 to 512 [ 93.213885][ T4486] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 93.407029][ T4459] loop3: detected capacity change from 0 to 32768 [ 93.449467][ T4459] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.50 (4459) [ 93.704261][ T4459] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 94.433104][ T4459] BTRFS info (device loop3): use zlib compression, level 3 [ 94.450614][ T4459] BTRFS info (device loop3): using free space tree [ 94.469539][ T4459] BTRFS info (device loop3): has skinny extents [ 95.217062][ T4459] BTRFS error (device loop3): open_ctree failed: -12 [ 95.607959][ T4531] loop3: detected capacity change from 0 to 32768 [ 95.713964][ T4531] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.67 (4531) [ 95.762500][ T4229] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.817091][ T4531] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 95.825892][ T4531] BTRFS info (device loop3): force clearing of disk cache [ 95.833194][ T4531] BTRFS info (device loop3): enabling auto defrag [ 95.839664][ T4531] BTRFS info (device loop3): max_inline at 0 [ 95.845714][ T4531] BTRFS info (device loop3): enabling disk space caching [ 95.852887][ T4531] BTRFS info (device loop3): disk space caching is enabled [ 95.860108][ T4531] BTRFS info (device loop3): has skinny extents [ 96.020518][ T4229] usb 5-1: Using ep0 maxpacket: 32 [ 96.221205][ T4229] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 96.235842][ T4229] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 96.289039][ T4229] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 96.316241][ T4229] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 96.334357][ T4556] loop0: detected capacity change from 0 to 8192 [ 96.340221][ T4229] usb 5-1: config 0 interface 0 has no altsetting 0 [ 96.469636][ T4556] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.513459][ T4531] BTRFS info (device loop3): enabling ssd optimizations [ 96.525410][ T4531] BTRFS info (device loop3): clearing free space tree [ 96.532967][ T4531] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 96.542978][ T4531] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 96.574465][ T4229] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 96.588171][ T4570] loop7: detected capacity change from 0 to 16384 [ 96.598054][ T4229] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 96.606627][ T4229] usb 5-1: Product: syz [ 96.610852][ T4229] usb 5-1: Manufacturer: syz [ 96.615469][ T4229] usb 5-1: SerialNumber: syz [ 96.624533][ T4229] usb 5-1: config 0 descriptor?? [ 96.681600][ T26] audit: type=1800 audit(1790781020.037:4): pid=4531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.67" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 96.708459][ T4229] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 96.743608][ T4229] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 96.765465][ T26] audit: type=1800 audit(1790781020.057:5): pid=4531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.67" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 96.916206][ T4356] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 96.955301][ T4570] loop_set_status: loop7 () has still dirty pages (nrpages=99) [ 97.202297][ T4227] usb 5-1: USB disconnect, device number 3 [ 97.210603][ T4529] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 97.220425][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 97.302983][ T4227] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 97.475338][ T4576] ODEBUG: Out of memory. ODEBUG disabled [ 97.544098][ T4587] loop2: detected capacity change from 0 to 256 [ 97.671280][ T4587] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 99.521949][ T4607] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 100.449660][ T4625] autofs4:pid:4625:autofs_fill_super: called with bogus options [ 100.474894][ T4606] loop1: detected capacity change from 0 to 32768 [ 100.553098][ T4606] JBD2: Ignoring recovery information on journal [ 100.692794][ T4606] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 101.000409][ T4640] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 101.029208][ T4640] loop2: detected capacity change from 0 to 128 [ 101.532277][ T4640] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,delalloc,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 101.549093][ T4640] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 101.867284][ T4606] syz.1.82 (4606) used greatest stack depth: 19440 bytes left [ 102.198347][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 103.363459][ T4657] loop2: detected capacity change from 0 to 512 [ 103.420429][ T4657] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 103.427830][ T4657] EXT4-fs (loop2): Unrecognized mount option "fsname=/" or missing value [ 104.905718][ T4669] loop3: detected capacity change from 0 to 128 [ 105.031141][ T4669] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.042057][ T4669] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.061605][ T4674] nvmet: adding nsid 1 to subsystem testsubsys [ 105.118367][ T4678] loop1: detected capacity change from 0 to 256 [ 105.262249][ T26] audit: type=1800 audit(1790781028.617:6): pid=4678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.101" name="memory.events" dev="loop1" ino=1048602 res=0 errno=0 [ 105.310297][ T26] audit: type=1804 audit(1790781028.647:7): pid=4678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.101" name="/newroot/17/file1/memory.events" dev="loop1" ino=1048602 res=1 errno=0 [ 105.663518][ T4692] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 105.875185][ T4693] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 106.501864][ T4692] loop0: detected capacity change from 0 to 128 [ 106.978793][ T4700] ip_tables: iptables: counters copy to user failed while replacing table [ 107.978713][ T4692] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,delalloc,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 107.995025][ T4692] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.590215][ T4708] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 109.982039][ T4722] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 110.978243][ T4738] loop4: detected capacity change from 0 to 1024 [ 111.379094][ T4742] netlink: 168 bytes leftover after parsing attributes in process `syz.4.117'. [ 111.825816][ T4727] loop1: detected capacity change from 0 to 32768 [ 111.869264][ T4744] loop3: detected capacity change from 0 to 1024 [ 112.217774][ T4752] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 112.228097][ T4752] loop2: detected capacity change from 0 to 128 [ 112.327791][ T4755] netlink: 168 bytes leftover after parsing attributes in process `syz.3.119'. [ 113.304852][ T4752] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,delalloc,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 113.321235][ T4752] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 113.698992][ T4740] loop0: detected capacity change from 0 to 32768 [ 114.829047][ T4784] loop3: detected capacity change from 0 to 1024 [ 114.848907][ T4776] loop1: detected capacity change from 0 to 32768 [ 115.036080][ T4786] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 115.205573][ T4792] loop2: detected capacity change from 0 to 1024 [ 115.212590][ T4776] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 115.276380][ T4776] capability: warning: `syz.1.127' uses deprecated v2 capabilities in a way that may be insecure [ 115.378645][ T4794] netlink: 168 bytes leftover after parsing attributes in process `syz.3.130'. [ 116.228701][ T4798] netlink: 168 bytes leftover after parsing attributes in process `syz.2.132'. [ 116.304702][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 118.856518][ T4825] Zero length message leads to an empty skb [ 118.869487][ T4833] netlink: 168 bytes leftover after parsing attributes in process `syz.1.144'. [ 118.937543][ T4835] loop2: detected capacity change from 0 to 1024 [ 119.978127][ T4846] loop4: detected capacity change from 0 to 512 [ 120.058081][ T4839] loop0: detected capacity change from 0 to 32768 [ 120.135202][ T4846] EXT4-fs (loop4): Test dummy encryption mode enabled [ 120.212858][ T4839] XFS (loop0): Mounting V5 Filesystem [ 120.343708][ T4846] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,usrquota,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 120.410626][ T1335] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 120.801989][ T4846] jffs2: notice: (4846) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 120.830925][ T1335] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 120.874528][ T1335] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 120.932245][ T1335] usb 3-1: config 220 has no interface number 2 [ 120.969734][ T1335] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 121.183747][ T1335] usb 3-1: config 220 interface 0 has no altsetting 0 [ 121.191296][ T1335] usb 3-1: config 220 interface 76 has no altsetting 0 [ 121.198822][ T1335] usb 3-1: config 220 interface 1 has no altsetting 0 [ 121.215009][ T4839] XFS (loop0): Ending clean mount [ 121.228410][ T4871] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 122.091248][ T4884] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 122.091493][ T1335] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 122.091523][ T1335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.091545][ T1335] usb 3-1: Product: syz [ 122.133407][ T1335] usb 3-1: Manufacturer: syz [ 122.138085][ T1335] usb 3-1: SerialNumber: syz [ 122.207298][ T4886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.157'. [ 122.270103][ T4888] netlink: 168 bytes leftover after parsing attributes in process `syz.1.158'. [ 122.319783][ T4193] XFS (loop0): Unmounting Filesystem [ 122.334605][ T4892] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 122.438791][ T4896] loop1: detected capacity change from 0 to 1024 [ 122.590787][ T1335] usb 3-1: selecting invalid altsetting 0 [ 122.597394][ T1335] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 122.608067][ T1335] usb 3-1: No valid video chain found. [ 122.811822][ T1335] usb 3-1: selecting invalid altsetting 0 [ 122.817945][ T1335] usbtest: probe of 3-1:220.1 failed with error -22 [ 122.827541][ T1335] usb 3-1: USB disconnect, device number 3 [ 123.178762][ T4910] loop2: detected capacity change from 0 to 1024 [ 123.298679][ T4910] hfsplus: xattr searching failed [ 123.901983][ T4918] loop1: detected capacity change from 0 to 128 [ 124.151619][ T4918] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,delalloc,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 124.199716][ T4918] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 124.295303][ T4931] loop2: detected capacity change from 0 to 512 [ 124.353746][ T4931] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 124.390729][ T4931] EXT4-fs (loop2): Unrecognized mount option "fsname=/" or missing value [ 125.355516][ T4944] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 125.551997][ T4948] loop4: detected capacity change from 0 to 128 [ 125.605165][ T4948] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,delalloc,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 125.629945][ T4948] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 125.652212][ T4954] loop0: detected capacity change from 0 to 1024 [ 125.736407][ T4954] hfsplus: xattr searching failed [ 126.248486][ T4967] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 126.259036][ T4967] loop1: detected capacity change from 0 to 128 [ 127.628338][ T4967] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,delalloc,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 127.644284][ T4967] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 128.684518][ T4974] loop3: detected capacity change from 0 to 512 [ 128.908362][ T4974] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 128.916495][ T4974] EXT4-fs (loop3): Unrecognized mount option "fsname=/" or missing value [ 129.079536][ T4987] overlayfs: failed to resolve './file0': -2 [ 129.599624][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 129.843361][ T4988] syz.1.188 (4988) used greatest stack depth: 19376 bytes left [ 130.949259][ T5007] loop0: detected capacity change from 0 to 1024 [ 130.967552][ T5005] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input14 [ 130.980787][ T5012] loop2: detected capacity change from 0 to 128 [ 131.037556][ T5015] loop1: detected capacity change from 0 to 1024 [ 131.061071][ T5007] hfsplus: xattr searching failed [ 131.265938][ T5012] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,delalloc,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 131.289710][ T5012] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 131.397089][ T5018] netlink: 16 bytes leftover after parsing attributes in process `syz.4.199'. [ 131.410463][ T1335] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 131.674661][ T5027] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 131.697448][ T5027] loop2: detected capacity change from 0 to 128 [ 131.706398][ T1335] usb 2-1: Using ep0 maxpacket: 32 [ 133.553067][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.559351][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.774150][ T5027] EXT4-fs: failed to create workqueue [ 135.779572][ T5027] EXT4-fs (loop2): mount failed [ 136.042759][ T1335] usb 2-1: unable to read config index 0 descriptor/all [ 136.060595][ T1335] usb 2-1: can't read configurations, error -71 [ 137.569193][ T5048] loop1: detected capacity change from 0 to 512 [ 137.700554][ T5051] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 137.710920][ T5051] loop0: detected capacity change from 0 to 128 [ 140.587529][ T5048] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 141.245957][ T5048] EXT4-fs (loop1): Unrecognized mount option "fsname=/" or missing value [ 141.315381][ T5051] EXT4-fs: failed to create workqueue [ 141.320895][ T5051] EXT4-fs (loop0): mount failed [ 141.354784][ T5060] loop2: detected capacity change from 0 to 128 [ 141.441497][ T5062] loop3: detected capacity change from 0 to 1024 [ 141.461355][ T5060] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,delalloc,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 141.477555][ T5060] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 141.545405][ T5062] hfsplus: xattr searching failed [ 141.703832][ T5068] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input15 [ 141.865692][ T5077] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 141.876139][ T5077] loop1: detected capacity change from 0 to 128 [ 144.556618][ T5080] loop2: detected capacity change from 0 to 1024 [ 145.597807][ T5077] EXT4-fs: failed to create workqueue [ 145.603317][ T5077] EXT4-fs (loop1): mount failed [ 145.848362][ T5089] loop3: detected capacity change from 0 to 128 [ 146.804553][ T1335] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 147.169007][ T5096] overlayfs: overlapping lowerdir path [ 147.263629][ T5089] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,delalloc,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 147.280994][ T5089] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 147.572546][ T5112] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 147.582781][ T5112] loop0: detected capacity change from 0 to 128 [ 148.582986][ T5108] loop4: detected capacity change from 0 to 4096 [ 148.594422][ T5111] loop2: detected capacity change from 0 to 512 [ 148.748233][ T5111] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 149.594084][ T5112] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,delalloc,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 149.609940][ T5112] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 149.662430][ T5111] EXT4-fs (loop2): Unrecognized mount option "fsname=/" or missing value [ 151.153234][ T5120] loop1: detected capacity change from 0 to 1024 [ 151.365577][ T5125] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 151.375748][ T5125] loop3: detected capacity change from 0 to 128 [ 152.752190][ T5120] hfsplus: xattr searching failed [ 153.183857][ T5125] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,delalloc,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 153.200217][ T5125] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 153.740564][ T5143] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input16 [ 154.130417][ T5145] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 154.203180][ T5145] loop4: detected capacity change from 0 to 128 [ 156.636746][ T5145] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,delalloc,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 156.653093][ T5145] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 157.579541][ T5155] loop3: detected capacity change from 0 to 1024 [ 158.064048][ T5160] gadgetfs: bound to dummy_udc driver [ 158.380466][ T4199] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 158.670581][ T4199] usb 4-1: Using ep0 maxpacket: 32 [ 158.705915][ T5163] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 158.743117][ T5170] loop1: detected capacity change from 0 to 512 [ 158.804204][ T5170] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 158.815508][ T4199] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.854086][ T5170] EXT4-fs (loop1): Unrecognized mount option "fsname=/" or missing value [ 158.911565][ T5163] netlink: 16 bytes leftover after parsing attributes in process `syz.0.238'. [ 158.979350][ T4199] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 159.002834][ T4199] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 159.023115][ T4199] usb 4-1: Product: syz [ 159.029287][ T4199] usb 4-1: Manufacturer: syz [ 159.166469][ T4199] hub 4-1:4.0: USB hub found [ 159.235407][ T5178] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 159.245881][ T5178] loop2: detected capacity change from 0 to 128 [ 160.026678][ T4199] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 160.091942][ T5178] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,delalloc,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 160.107801][ T5178] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 160.561204][ T4589] usb 4-1: USB disconnect, device number 2 [ 160.635422][ T5200] loop4: detected capacity change from 0 to 16 [ 160.654875][ T5200] erofs: (device loop4): mounted with root inode @ nid 36. [ 160.676655][ T5200] attempt to access beyond end of device [ 160.676655][ T5200] loop4: rw=524288, want=40, limit=16 [ 160.705298][ T5202] loop2: detected capacity change from 0 to 1024 [ 160.723638][ T5200] attempt to access beyond end of device [ 160.723638][ T5200] loop4: rw=524288, want=104, limit=16 [ 160.735131][ T5200] attempt to access beyond end of device [ 160.735131][ T5200] loop4: rw=0, want=24, limit=16 [ 160.746079][ T26] audit: type=1800 audit(1790781084.107:8): pid=5200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.246" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 161.045782][ T5205] netlink: 168 bytes leftover after parsing attributes in process `syz.2.247'. [ 161.832454][ T5133] hfsplus: bad catalog file entry [ 161.934169][ T5211] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 161.959520][ T5211] loop3: detected capacity change from 0 to 128 [ 164.565092][ T5219] loop1: detected capacity change from 0 to 512 [ 165.057486][ T5211] EXT4-fs: failed to create workqueue [ 165.063426][ T5211] EXT4-fs (loop3): mount failed [ 165.426855][ T5219] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 165.496870][ T5219] EXT4-fs (loop1): Unrecognized mount option "fsname=/" or missing value [ 165.778003][ T5231] overlayfs: failed to resolve './file1': -2 [ 167.465971][ T5248] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input18 [ 168.021604][ T5255] loop3: detected capacity change from 0 to 1024 [ 168.677001][ T5265] netlink: 168 bytes leftover after parsing attributes in process `syz.3.262'. [ 169.702729][ T4298] hfsplus: bad catalog file entry [ 169.815261][ T5272] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 169.825678][ T5272] loop0: detected capacity change from 0 to 128 [ 172.611490][ T5272] EXT4-fs: failed to create workqueue [ 172.617011][ T5272] EXT4-fs (loop0): mount failed [ 173.073431][ T5296] loop4: detected capacity change from 0 to 1024 [ 173.390403][ T5302] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 173.792700][ T5302] loop0: detected capacity change from 0 to 128 [ 175.602409][ T5302] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,delalloc,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 175.618345][ T5302] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 176.690133][ T5326] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 176.716031][ T5326] loop0: detected capacity change from 0 to 128 [ 180.650579][ T5342] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 180.660929][ T5342] loop0: detected capacity change from 0 to 128 [ 183.540646][ T5347] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 183.725278][ T5347] loop1: detected capacity change from 0 to 128 [ 184.603922][ T5342] EXT4-fs: failed to create workqueue [ 184.609345][ T5342] EXT4-fs (loop0): mount failed [ 185.388067][ T5347] EXT4-fs: failed to create workqueue [ 185.393534][ T5347] EXT4-fs (loop1): mount failed [ 186.425271][ T5358] loop0: detected capacity change from 0 to 1024 [ 188.237858][ T5368] loop1: detected capacity change from 0 to 512 [ 188.576230][ T5368] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 188.603357][ T5364] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input19 [ 188.615678][ T5368] EXT4-fs (loop1): 1 truncate cleaned up [ 188.621709][ T5368] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 189.194503][ T5384] loop0: detected capacity change from 0 to 1024 [ 190.155629][ T5391] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 190.165858][ T5391] loop2: detected capacity change from 0 to 128 [ 190.435139][ T5391] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,delalloc,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 190.451074][ T5391] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 190.615833][ T5394] loop3: detected capacity change from 0 to 1024 [ 191.019670][ T5397] netlink: 168 bytes leftover after parsing attributes in process `syz.0.295'. [ 191.564360][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 191.570453][ T23] Bluetooth: hci2: command 0x0406 tx timeout [ 191.576471][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 191.632099][ T4591] Bluetooth: hci1: command 0x0406 tx timeout [ 192.810417][ T5405] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 193.261814][ T5405] loop4: detected capacity change from 0 to 128 [ 194.561168][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.567575][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.863820][ T5405] EXT4-fs: failed to create workqueue [ 196.869284][ T5405] EXT4-fs (loop4): mount failed [ 197.502358][ T5434] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 197.512619][ T5434] loop2: detected capacity change from 0 to 128 [ 197.610299][ T5436] overlayfs: failed to resolve './bus': -2 [ 200.662073][ T5440] loop3: detected capacity change from 0 to 1024 [ 200.692517][ T5434] EXT4-fs: failed to create workqueue [ 200.697946][ T5434] EXT4-fs (loop2): mount failed [ 200.741283][ T5444] loop1: detected capacity change from 0 to 1024 [ 201.109835][ T5450] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 201.133195][ T5450] loop0: detected capacity change from 0 to 128 [ 201.162942][ T5452] netlink: 168 bytes leftover after parsing attributes in process `syz.3.310'. [ 205.591620][ T5450] EXT4-fs: failed to create workqueue [ 205.597038][ T5450] EXT4-fs (loop0): mount failed [ 205.912513][ T5466] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 205.936774][ T5466] loop2: detected capacity change from 0 to 128 [ 209.344442][ T5488] overlayfs: failed to resolve './file0': -2 [ 210.130643][ T5484] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input20 [ 210.171396][ T5492] loop1: detected capacity change from 0 to 1024 [ 210.710411][ T5503] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 211.000420][ T5504] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 211.114653][ T5503] loop2: detected capacity change from 0 to 128 [ 212.671475][ T5504] loop3: detected capacity change from 0 to 128 [ 215.459077][ T5519] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 216.267433][ T5519] loop2: detected capacity change from 0 to 128 [ 216.591192][ T5519] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,delalloc,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 216.607418][ T5519] ext4 filesystem being mounted at /67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 218.177856][ T5540] loop0: detected capacity change from 0 to 1024 [ 218.296969][ T5544] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 218.320464][ T5544] loop2: detected capacity change from 0 to 128 [ 218.539862][ T5544] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,delalloc,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 218.556441][ T5544] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 219.663644][ T5547] fuse: Bad value for 'rootmode' [ 219.708165][ T5547] process 'syz.1.340' launched './file0' with NULL argv: empty string added [ 220.569005][ T5551] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input21 [ 220.644018][ T5557] loop4: detected capacity change from 0 to 8 [ 220.805828][ T5561] overlayfs: failed to resolve './bus': -2 [ 221.442656][ T5575] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 221.453073][ T5575] loop2: detected capacity change from 0 to 128 [ 221.556274][ T5577] overlayfs: failed to resolve './file0': -2 [ 222.565362][ T5575] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,delalloc,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 222.581273][ T5575] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 223.067172][ T1335] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 223.640679][ T1335] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.428497][ T4199] hid-generic 0005:046E:0007.0001: unknown main item tag 0x1 [ 224.440438][ T1335] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 224.449528][ T1335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.481180][ T1335] usb 5-1: config 0 descriptor?? [ 224.510455][ T1335] usb 5-1: can't set config #0, error -71 [ 224.516881][ T4199] hid-generic 0005:046E:0007.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 224.542409][ T1335] usb 5-1: USB disconnect, device number 4 [ 224.583467][ T5587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.350'. [ 224.808859][ T5595] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 224.833295][ T5595] loop0: detected capacity change from 0 to 128 [ 225.203385][ T5595] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,delalloc,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 225.220419][ T5595] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 228.409348][ T5622] syz.4.361 (5622): /proc/5621/oom_adj is deprecated, please use /proc/5621/oom_score_adj instead. [ 228.571884][ T5631] loop3: detected capacity change from 0 to 1024 [ 228.635971][ T5631] hfsplus: xattr searching failed [ 229.026753][ T5641] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 229.049835][ T5641] loop1: detected capacity change from 0 to 128 [ 229.809263][ T5641] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,delalloc,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 229.826004][ T5641] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 229.989967][ T5644] loop4: detected capacity change from 0 to 512 [ 231.394073][ T5644] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 231.442141][ T5644] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 231.586518][ T5653] futex_wake_op: syz.0.372 tries to shift op by -1; fix this program [ 231.615864][ T5653] futex_wake_op: syz.0.372 tries to shift op by -1; fix this program [ 232.058986][ T5660] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 232.907649][ T5663] loop4: detected capacity change from 0 to 256 [ 232.976727][ T5663] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 233.367458][ T5672] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input22 [ 233.690531][ T5683] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 233.700853][ T5683] loop4: detected capacity change from 0 to 128 [ 237.172504][ T5683] EXT4-fs: failed to create workqueue [ 237.177940][ T5683] EXT4-fs (loop4): mount failed [ 238.191683][ T5707] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 238.934864][ T5713] loop0: detected capacity change from 0 to 1024 [ 238.985619][ T4596] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 239.022111][ T5713] hfsplus: xattr searching failed [ 240.840602][ T4596] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 240.890439][ T4596] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 241.080443][ T4596] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 241.154340][ T5729] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 241.164916][ T5729] loop3: detected capacity change from 0 to 128 [ 241.361350][ T5729] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,delalloc,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 241.377384][ T5729] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 241.444805][ T4596] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.452971][ T4596] usb 2-1: Product: syz [ 241.457203][ T4596] usb 2-1: Manufacturer: syz [ 241.461879][ T4596] usb 2-1: SerialNumber: syz [ 241.551953][ T4596] usb 2-1: can't set config #1, error -71 [ 241.566378][ T4596] usb 2-1: USB disconnect, device number 4 [ 246.085713][ T5748] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input23 [ 247.084891][ T5764] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 247.793675][ T4191] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 247.809775][ T5774] loop4: detected capacity change from 0 to 1024 [ 247.890363][ T4596] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 248.206678][ T5778] netlink: 168 bytes leftover after parsing attributes in process `syz.4.408'. [ 248.901381][ T4596] usb 1-1: Using ep0 maxpacket: 16 [ 249.060540][ T4356] hfsplus: bad catalog file entry [ 249.710495][ T4596] usb 1-1: unable to get BOS descriptor or descriptor too short [ 250.990476][ T4596] usb 1-1: unable to read config index 0 descriptor/all [ 251.000520][ T4596] usb 1-1: can't read configurations, error -71 [ 251.560354][ T21] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 251.736398][ T5806] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 251.810588][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 252.510441][ T21] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 252.520259][ T21] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 252.540346][ T21] usb 3-1: config 0 interface 0 has no altsetting 0 [ 252.721375][ T5812] loop1: detected capacity change from 0 to 1024 [ 252.834442][ T5818] loop0: detected capacity change from 0 to 16 [ 252.890800][ T21] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 252.970821][ T5818] erofs: (device loop0): mounted with root inode @ nid 36. [ 253.024643][ T4191] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[9000] [ 253.230425][ T26] audit: type=1800 audit(1790781176.527:9): pid=5818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.423" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 253.259538][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.340482][ T21] usb 3-1: Product: syz [ 253.345034][ T21] usb 3-1: Manufacturer: syz [ 253.349657][ T21] usb 3-1: SerialNumber: syz [ 253.527096][ T21] usb 3-1: config 0 descriptor?? [ 255.482126][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.488579][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.663916][ T5836] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input24 [ 256.754095][ T4199] usb 3-1: USB disconnect, device number 5 [ 257.378488][ T5850] loop4: detected capacity change from 0 to 1024 [ 257.575077][ T5850] hfsplus: xattr searching failed [ 257.587199][ T5853] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 259.307657][ T5869] loop3: detected capacity change from 0 to 1024 [ 259.366405][ T5869] EXT4-fs (loop3): Ignoring removed orlov option [ 259.499541][ T5869] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 259.559144][ T5875] loop4: detected capacity change from 0 to 1024 [ 259.936416][ T5884] netlink: 168 bytes leftover after parsing attributes in process `syz.4.437'. [ 260.722741][ T5133] hfsplus: bad catalog file entry [ 261.567604][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.445'. [ 261.709955][ T5903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.041883][ T5906] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 262.134949][ T5908] loop2: detected capacity change from 0 to 1024 [ 262.305681][ T5908] hfsplus: xattr searching failed [ 263.158652][ T5920] netlink: 32 bytes leftover after parsing attributes in process `syz.3.451'. [ 263.228062][ T5923] loop2: detected capacity change from 0 to 1024 [ 263.246786][ T5927] netlink: 32 bytes leftover after parsing attributes in process `syz.3.451'. [ 263.310773][ T5929] netlink: 14 bytes leftover after parsing attributes in process `syz.4.455'. [ 263.361406][ T5926] loop0: detected capacity change from 0 to 128 [ 263.448428][ T5926] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 263.570370][ T5926] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 263.649880][ T5936] netlink: 168 bytes leftover after parsing attributes in process `syz.2.453'. [ 265.582379][ T5133] hfsplus: bad catalog file entry [ 265.710741][ T5944] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 265.719438][ T5944] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 265.736715][ T5944] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 265.744198][ T5944] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 266.932700][ T5944] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.278864][ T5957] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 267.403815][ T5962] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input26 [ 268.365937][ T5973] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 268.376172][ T5973] loop0: detected capacity change from 0 to 128 [ 272.280397][ T5985] netlink: 168 bytes leftover after parsing attributes in process `syz.0.469'. [ 273.099384][ T5990] overlayfs: unrecognized mount option "verity=require" or missing value [ 273.640375][ T1335] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 273.882589][ T6010] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 273.893105][ T6010] loop3: detected capacity change from 0 to 128 [ 275.560369][ T4594] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 276.780464][ T1335] usb 3-1: device not accepting address 6, error -71 [ 277.091158][ T6010] EXT4-fs: error -4 creating inode table initialization thread [ 277.099388][ T6010] EXT4-fs (loop3): mount failed [ 278.112318][ T6027] loop3: detected capacity change from 0 to 1024 [ 278.137001][ T6029] loop1: detected capacity change from 0 to 1024 [ 278.155053][ T665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.198056][ T665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.294585][ T6053] netlink: 168 bytes leftover after parsing attributes in process `syz.1.484'. [ 279.558498][ T6058] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 279.571744][ T6058] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 279.750969][ T6060] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 279.760892][ T6060] loop0: detected capacity change from 0 to 128 [ 280.055745][ T4350] hfsplus: bad catalog file entry [ 280.153155][ T6060] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,delalloc,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 280.169419][ T6060] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 280.332936][ T4199] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 281.830573][ T4199] usb 4-1: Using ep0 maxpacket: 32 [ 282.081787][ T4199] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.160859][ T4199] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.228621][ T6069] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input27 [ 282.540447][ T4199] usb 4-1: string descriptor 0 read error: -71 [ 282.546732][ T4199] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 282.615487][ T4199] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 282.690858][ T4199] usb 4-1: can't set config #1, error -71 [ 282.706450][ T4199] usb 4-1: USB disconnect, device number 3 [ 283.525329][ T6084] loop0: detected capacity change from 0 to 1024 [ 283.564484][ T6086] tipc: Failed to remove unknown binding: 66,0,0/0:2748852686/2748852688 [ 283.620509][ T6086] tipc: Failed to remove unknown binding: 66,0,0/0:2748852686/2748852687 [ 284.370459][ T4199] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 284.670348][ T4199] usb 5-1: Using ep0 maxpacket: 16 [ 285.675433][ T4199] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 285.690358][ T4199] usb 5-1: config 0 interface 0 has no altsetting 0 [ 285.761977][ T6116] loop0: detected capacity change from 0 to 512 [ 285.793539][ T6116] EXT4-fs (loop0): Ignoring removed bh option [ 285.860487][ T4199] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 285.879679][ T4199] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.940320][ T4199] usb 5-1: Product: syz [ 285.960415][ T4199] usb 5-1: Manufacturer: syz [ 285.965065][ T4199] usb 5-1: SerialNumber: syz [ 286.138702][ T4199] usb 5-1: config 0 descriptor?? [ 286.960640][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 286.980988][ T6116] EXT4-fs (loop0): Test dummy encryption mode enabled [ 288.124950][ T4199] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input28 [ 288.140834][ T6116] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.511: inode #1: comm syz.0.511: iget: illegal inode # [ 288.175629][ T6116] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.511: error while reading EA inode 1 err=-117 [ 288.205464][ T6116] EXT4-fs (loop0): 1 orphan inode deleted [ 288.214397][ T6116] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,grpjquota=,bh,norecovery,noauto_da_alloc,usrjquota=,debug_want_extra_isize=0x000000000000005c,nogrpid,dioread_lock,test_dummy_encryption,noquota,,errors=continue. Quota mode: none. [ 288.304020][ T4199] imon:send_packet: packet tx failed (-71) [ 288.337245][ T4199] imon 5-1:0.0: panel buttons/knobs setup failed [ 288.590450][ T4199] rc_core: IR keymap rc-imon-pad not found [ 288.596366][ T4199] Registered IR keymap rc-empty [ 288.607551][ T4199] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 288.632575][ T4199] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 288.700388][ T4199] imon:send_packet: packet tx failed (-71) [ 288.730465][ T4199] imon 5-1:0.0: remote input dev register failed [ 288.739876][ T4199] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 288.875604][ T4199] imon 5-1:0.0: unable to initialize intf0, err 0 [ 288.901949][ T4199] imon:imon_probe: failed to initialize context! [ 288.928668][ T4199] imon 5-1:0.0: unable to register, err -19 [ 289.563416][ T4199] usb 5-1: USB disconnect, device number 6 [ 290.780620][ T6159] loop3: detected capacity change from 0 to 16 [ 290.944622][ T6158] loop2: detected capacity change from 0 to 256 [ 291.583180][ T6159] erofs: (device loop3): mounted with root inode @ nid 36. [ 291.604553][ T4191] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[9000] [ 291.640628][ T6159] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[8192] [ 291.926009][ T6159] netlink: 16 bytes leftover after parsing attributes in process `syz.3.521'. [ 292.036415][ T26] audit: type=1800 audit(1790781215.017:10): pid=6159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.521" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 292.532484][ T6158] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 293.435334][ T6173] loop2: detected capacity change from 0 to 512 [ 293.494134][ T6176] FAULT_INJECTION: forcing a failure. [ 293.494134][ T6176] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 293.522304][ T6173] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.526: missing EA_INODE flag [ 293.544303][ T6176] CPU: 1 PID: 6176 Comm: syz.0.527 Not tainted syzkaller #0 [ 293.551634][ T6176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 293.561720][ T6176] Call Trace: [ 293.565030][ T6176] [ 293.567985][ T6176] dump_stack_lvl+0x188/0x250 [ 293.570640][ T6173] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.526: error while reading EA inode 2 err=-117 [ 293.572820][ T6176] ? show_regs_print_info+0x20/0x20 [ 293.590093][ T6176] ? load_image+0x410/0x410 [ 293.594629][ T6176] ? verify_lock_unused+0x140/0x140 [ 293.599862][ T6176] ? mark_lock+0x94/0x320 [ 293.603023][ T6173] EXT4-fs (loop2): 1 orphan inode deleted [ 293.604214][ T6176] should_fail+0x383/0x4b0 [ 293.614363][ T6176] prepare_alloc_pages+0x1e3/0x5b0 [ 293.619513][ T6176] __alloc_pages+0x11b/0x480 [ 293.624138][ T6176] ? zone_statistics+0x170/0x170 [ 293.624300][ T6173] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 293.629191][ T6176] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 293.646988][ T6176] ? __lock_acquire+0x7b50/0x7b50 [ 293.652047][ T6176] ? alloc_pages+0x452/0x560 [ 293.656667][ T6176] new_slab+0xc0/0x4b0 [ 293.660769][ T6176] ___slab_alloc+0x807/0xdd0 [ 293.665395][ T6176] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 293.671154][ T6176] __kmalloc+0x11d/0x340 [ 293.675433][ T6176] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 293.681198][ T6176] tomoyo_realpath_from_path+0xed/0x5e0 [ 293.686791][ T6176] tomoyo_path_number_perm+0x251/0x6b0 [ 293.692286][ T6176] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 293.697767][ T6176] ? do_futex+0xd83/0x12b0 [ 293.702256][ T6176] security_file_ioctl+0x6c/0xa0 [ 293.707222][ T6176] __se_sys_ioctl+0x48/0x170 [ 293.711847][ T6176] do_syscall_64+0x4c/0xa0 [ 293.716287][ T6176] ? clear_bhb_loop+0x30/0x80 [ 293.720995][ T6176] ? clear_bhb_loop+0x30/0x80 [ 293.725715][ T6176] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 293.731646][ T6176] RIP: 0033:0x7fdb03e82159 [ 293.736123][ T6176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.755784][ T6176] RSP: 002b:00007fdb020da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 293.764232][ T6176] RAX: ffffffffffffffda RBX: 00007fdb04109fa0 RCX: 00007fdb03e82159 [ 293.772232][ T6176] RDX: 0000000000000000 RSI: 00000000c0184800 RDI: 0000000000000003 [ 293.780228][ T6176] RBP: 00007fdb03f1906b R08: 0000000000000000 R09: 0000000000000000 [ 293.788231][ T6176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.796240][ T6176] R13: 00007fdb0410a038 R14: 00007fdb04109fa0 R15: 00007fff26e349d8 [ 293.804287][ T6176] [ 295.127433][ T4594] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 296.293771][ T6214] CIFS: Attempting to mount \\127.0.0.1\share [ 296.707803][ T6214] CIFS: VFS: Could not allocate crypto cmac(aes) [ 296.780459][ T4594] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.800478][ T4594] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.810755][ T4594] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 296.819868][ T4594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.831443][ T4594] usb 4-1: config 0 descriptor?? [ 296.977580][ T6214] CIFS: VFS: cifs_mount failed w/return code = -112 [ 297.345642][ T4594] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 297.365829][ T4594] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 297.406352][ T6231] loop2: detected capacity change from 0 to 32768 [ 297.421451][ T4594] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0002/input/input31 [ 297.489798][ T4594] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 297.607177][ T6231] ERROR: (device loop2): dbAlloc: unable to allocate blocks [ 297.607177][ T6231] [ 297.689350][ T6231] ERROR: (device loop2): remounting filesystem as read-only [ 297.779481][ T6134] usb 4-1: USB disconnect, device number 4 [ 298.282228][ T6241] loop4: detected capacity change from 0 to 4096 [ 298.333061][ T6241] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 299.749749][ T6260] loop3: detected capacity change from 0 to 1024 [ 299.835325][ T6263] loop0: detected capacity change from 0 to 256 [ 299.895459][ T6263] exfat: Deprecated parameter 'namecase' [ 299.901484][ T6263] exfat: Deprecated parameter 'namecase' [ 300.002648][ T6263] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 301.274135][ T6279] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 301.967844][ T6289] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 301.978143][ T6289] loop2: detected capacity change from 0 to 128 [ 302.140391][ T21] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 302.733173][ T21] usb 4-1: unable to get BOS descriptor or descriptor too short [ 303.013786][ T21] usb 4-1: not running at top speed; connect to a high speed hub [ 303.490480][ T21] usb 4-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 303.499890][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.564301][ T6289] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,delalloc,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 303.580179][ T6289] ext4 filesystem being mounted at /119/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 303.630402][ T21] usb 4-1: Product: syz [ 303.634604][ T21] usb 4-1: Manufacturer: syz [ 303.649501][ T21] usb 4-1: SerialNumber: syz [ 305.390538][ T21] usb 4-1: MIDIStreaming interface descriptor not found [ 305.730354][ T6308] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 306.079011][ T6308] loop2: detected capacity change from 0 to 128 [ 306.906361][ T21] usb 4-1: USB disconnect, device number 5 [ 306.979723][ T6317] loop0: detected capacity change from 0 to 256 [ 307.707191][ T6322] loop4: detected capacity change from 0 to 1024 [ 308.593415][ T6317] FAT-fs (loop0): Directory bread(block 64) failed [ 308.677741][ T6308] EXT4-fs: failed to create workqueue [ 308.683267][ T6308] EXT4-fs (loop2): mount failed [ 309.015623][ T6317] FAT-fs (loop0): Directory bread(block 65) failed [ 309.042903][ T6317] FAT-fs (loop0): Directory bread(block 66) failed [ 309.066459][ T6317] FAT-fs (loop0): Directory bread(block 67) failed [ 309.275409][ T6317] FAT-fs (loop0): Directory bread(block 68) failed [ 309.286777][ T6317] FAT-fs (loop0): Directory bread(block 69) failed [ 309.308022][ T6317] FAT-fs (loop0): Directory bread(block 70) failed [ 309.858775][ T6317] FAT-fs (loop0): Directory bread(block 71) failed [ 309.892418][ T6322] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 309.903603][ T6322] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 309.917240][ T6322] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #3: comm syz.4.564: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 309.939142][ T6322] EXT4-fs (loop4): no journal found [ 309.944415][ T6322] EXT4-fs (loop4): can't get journal size [ 309.956374][ T6322] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,noblock_validity,max_dir_size_kb=0x0000000000000008,noinit_itable,quota,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 309.997160][ T6317] FAT-fs (loop0): Directory bread(block 72) failed [ 310.007813][ T6317] FAT-fs (loop0): Directory bread(block 73) failed [ 310.342184][ T6330] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 311.725444][ T6348] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 311.736170][ T6348] loop0: detected capacity change from 0 to 128 [ 314.076089][ T6348] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,delalloc,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 314.092247][ T6348] ext4 filesystem being mounted at /123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 315.125004][ T6355] loop4: detected capacity change from 0 to 1024 [ 316.346965][ T6355] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 317.378998][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.379077][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.611353][ T6375] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 318.621652][ T6375] loop2: detected capacity change from 0 to 128 [ 324.357378][ T6385] loop2: detected capacity change from 0 to 32768 [ 324.378116][ T6385] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.580 (6385) [ 324.401340][ T6385] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 324.410151][ T6385] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 324.420023][ T6385] BTRFS info (device loop2): use zstd compression, level 3 [ 324.427300][ T6385] BTRFS info (device loop2): force clearing of disk cache [ 324.434795][ T6385] BTRFS info (device loop2): enabling disk space caching [ 324.441915][ T6385] BTRFS info (device loop2): disk space caching is enabled [ 324.449138][ T6385] BTRFS info (device loop2): has skinny extents [ 324.484818][ T6388] jffs2: notice: (6388) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 324.744443][ T6416] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 324.754994][ T6416] loop4: detected capacity change from 0 to 128 [ 324.840483][ T6385] BTRFS info (device loop2): enabling ssd optimizations [ 324.849437][ T6385] BTRFS info (device loop2): clearing free space tree [ 324.856552][ T6385] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 324.866280][ T6385] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 326.566003][ T6415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.584'. [ 326.804630][ T6416] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,delalloc,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 326.821035][ T6416] ext4 filesystem being mounted at /120/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 328.556307][ T6420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.153462][ T4347] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 10 /dev/loop2 scanned by udevd (4347) [ 329.571205][ T6441] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 329.581109][ T6441] loop0: detected capacity change from 0 to 128 [ 332.138965][ T6451] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 332.682825][ T6441] EXT4-fs: failed to create workqueue [ 332.688265][ T6441] EXT4-fs (loop0): mount failed [ 333.832905][ T6463] loop0: detected capacity change from 0 to 256 [ 334.002501][ T6466] jffs2: notice: (6466) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 334.076276][ T6471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.598'. [ 334.204563][ T6474] loop0: detected capacity change from 0 to 2048 [ 334.252594][ T6474] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 334.299564][ T6474] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 334.328404][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.601'. [ 334.574247][ T6483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.602'. [ 334.629331][ T6484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.684672][ T6461] loop1: detected capacity change from 0 to 32768 [ 334.777383][ T6461] XFS (loop1): Mounting V5 Filesystem [ 334.816199][ T6461] XFS (loop1): Ending clean mount [ 335.141053][ T6479] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.148706][ T6479] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.163218][ T4185] XFS (loop1): Unmounting Filesystem [ 335.669377][ T6479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.686377][ T6479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.778226][ T6479] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.790621][ T6479] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.801763][ T6479] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.816878][ T6479] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.826060][ T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 336.203409][ T6500] loop2: detected capacity change from 0 to 32768 [ 336.325247][ T6500] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 336.334354][ T6500] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 336.343913][ T6500] BTRFS info (device loop2): use zstd compression, level 3 [ 336.351204][ T6500] BTRFS info (device loop2): force clearing of disk cache [ 336.358436][ T6500] BTRFS info (device loop2): enabling disk space caching [ 336.365518][ T6500] BTRFS info (device loop2): disk space caching is enabled [ 336.372776][ T6500] BTRFS info (device loop2): has skinny extents [ 336.405882][ T6512] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 336.913537][ T6514] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 336.923922][ T6514] loop0: detected capacity change from 0 to 128 [ 338.000406][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.308029][ T6514] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,delalloc,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 338.324377][ T6514] ext4 filesystem being mounted at /132/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 338.970545][ T21] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 338.979998][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.703768][ T21] usb 2-1: config 0 descriptor?? [ 340.084494][ T6554] loop3: detected capacity change from 0 to 1024 [ 340.229861][ T21] usb 2-1: can't set config #0, error -71 [ 340.401528][ T21] usb 2-1: USB disconnect, device number 5 [ 340.698141][ T6500] BTRFS error (device loop2): open_ctree failed: -22 [ 341.013910][ T6554] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 341.436778][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.616'. [ 341.493943][ T6568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.790406][ T4596] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 342.660897][ T4596] usb 2-1: Using ep0 maxpacket: 16 [ 343.090383][ T4596] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 343.911176][ T4596] usb 2-1: config 0 interface 0 has no altsetting 0 [ 344.211542][ T4596] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 345.209105][ T4596] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.219240][ T4596] usb 2-1: Product: syz [ 345.223872][ T4596] usb 2-1: Manufacturer: syz [ 345.789079][ T4596] usb 2-1: SerialNumber: syz [ 345.799836][ T26] audit: type=1326 audit(1790781269.147:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.626" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62a658159 code=0x7ffc0000 [ 345.838559][ T4596] usb 2-1: config 0 descriptor?? [ 346.784325][ T26] audit: type=1326 audit(1790781269.197:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.626" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62a658159 code=0x7ffc0000 [ 346.808801][ T26] audit: type=1326 audit(1790781269.197:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.626" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62a658159 code=0x7ffc0000 [ 346.833083][ T26] audit: type=1326 audit(1790781269.217:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.626" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fe62a658159 code=0x7ffc0000 [ 346.857351][ T26] audit: type=1326 audit(1790781269.217:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.626" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62a658159 code=0x7ffc0000 [ 347.000844][ T26] audit: type=1326 audit(1790781269.217:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.626" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62a658159 code=0x7ffc0000 [ 347.494358][ T26] audit: type=1326 audit(1790781269.227:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.626" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe62a658159 code=0x7ffc0000 [ 347.542243][ T26] audit: type=1326 audit(1790781269.227:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.626" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe62a658159 code=0x7ffc0000 [ 347.583327][ T6632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.631'. [ 347.741210][ T6632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.888675][ T6639] loop3: detected capacity change from 0 to 1024 [ 348.771384][ T6639] hfsplus: xattr searching failed [ 348.780698][ T4596] usb 2-1: can't set config #0, error -71 [ 350.431904][ T6645] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 350.629916][ T4596] usb 2-1: USB disconnect, device number 6 [ 352.601300][ T6666] syz.2.641 uses obsolete (PF_INET,SOCK_PACKET) [ 353.391842][ T6674] usb usb8: usbfs: process 6674 (syz.4.644) did not claim interface 1 before use [ 354.505428][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.646'. [ 355.398412][ T6683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.723534][ T6710] loop3: detected capacity change from 0 to 128 [ 357.841237][ T6710] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 357.919366][ T6710] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 359.374421][ T6732] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 359.384830][ T6732] loop0: detected capacity change from 0 to 128 [ 361.121978][ T6732] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,delalloc,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 361.137913][ T6732] ext4 filesystem being mounted at /146/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 362.827557][ T6744] CIFS: Attempting to mount \\127.0.0.1\share [ 363.599990][ T6750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'. [ 363.612798][ T6750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.204946][ T6744] CIFS: VFS: Error connecting to socket. Aborting operation. [ 364.230623][ T6744] CIFS: VFS: cifs_mount failed w/return code = -4 [ 364.547991][ T6765] loop3: detected capacity change from 0 to 128 [ 364.608358][ T6765] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 364.661039][ T6765] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 364.804317][ T6777] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 364.814523][ T6777] loop4: detected capacity change from 0 to 128 [ 365.721353][ T6777] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,delalloc,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 365.737603][ T6777] ext4 filesystem being mounted at /140/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 367.002511][ T6784] loop2: detected capacity change from 0 to 128 [ 368.348072][ T6784] FAT-fs (loop2): bogus number of reserved sectors [ 368.481685][ T6784] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 368.557078][ T6784] FAT-fs (loop2): Can't find a valid FAT filesystem [ 368.651917][ T6805] CIFS: Attempting to mount \\127.0.0.1\share [ 368.659460][ T6805] CIFS: VFS: Error connecting to socket. Aborting operation. [ 368.667101][ T6805] CIFS: VFS: cifs_mount failed w/return code = -101 [ 368.758102][ T6803] tipc: Failed to obtain node identity [ 368.839086][ T6803] tipc: Enabling of bearer rejected, failed to enable media [ 369.421274][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.685'. [ 369.433462][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.685'. [ 369.444831][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.685'. [ 369.458616][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.685'. [ 369.468083][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.685'. [ 369.504598][ T6807] fuse: root generation should be zero [ 371.050779][ T6833] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input32 [ 371.299170][ T6813] trusted_key: encrypted_key: insufficient parameters specified [ 371.796355][ T6848] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 373.886486][ T6854] loop3: detected capacity change from 0 to 128 [ 373.913604][ T6855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.698'. [ 373.948367][ T6854] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 373.985755][ T6835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.692'. [ 373.998235][ T6855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.022861][ T6854] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 375.100056][ T6868] autofs4:pid:6868:autofs_fill_super: called with bogus options [ 375.535546][ T6882] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 377.769520][ T6883] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input33 [ 378.374838][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.381535][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.216420][ T6915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.717'. [ 380.256161][ T6915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.506379][ T6922] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 382.016258][ T6923] CIFS: Attempting to mount \\127.0.0.1\share [ 382.181191][ T6923] CIFS: VFS: Error connecting to socket. Aborting operation. [ 382.604892][ T6923] CIFS: VFS: cifs_mount failed w/return code = -4 [ 382.920385][ T4260] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 384.190509][ T4260] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 384.233185][ T4260] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 12336, setting to 64 [ 384.244886][ T4260] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 384.254223][ T4260] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.278878][ T4260] usb 1-1: config 0 descriptor?? [ 384.289715][ T6942] loop2: detected capacity change from 0 to 4096 [ 384.442041][ T6951] overlayfs: failed to resolve './bus': -2 [ 384.727140][ T4260] ath6kl: Failed to submit usb control message: -71 [ 384.750738][ T4260] ath6kl: unable to send the bmi data to the device: -71 [ 384.757881][ T4260] ath6kl: Unable to send get target info: -71 [ 385.062076][ T4260] ath6kl: Failed to init ath6kl core: -71 [ 385.111234][ T4260] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 385.122020][ T6957] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 385.138061][ T4260] usb 1-1: USB disconnect, device number 5 [ 385.188968][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.730'. [ 385.217470][ T26] audit: type=1800 audit(1790781308.567:19): pid=6942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.725" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 385.253539][ T6942] attempt to access beyond end of device [ 385.253539][ T6942] loop2: rw=0, want=2097328, limit=4096 [ 385.296911][ T6942] attempt to access beyond end of device [ 385.296911][ T6942] loop2: rw=0, want=2097328, limit=4096 [ 385.338580][ T26] audit: type=1326 audit(1790781308.687:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.0.732" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb03e82159 code=0x7ffc0000 [ 385.374760][ T26] audit: type=1326 audit(1790781308.687:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.0.732" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fdb03e82159 code=0x7ffc0000 [ 385.524540][ T6969] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 385.534761][ T6969] loop3: detected capacity change from 0 to 128 [ 385.792751][ T6969] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,delalloc,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 385.809135][ T6969] ext4 filesystem being mounted at /135/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 386.689808][ T26] audit: type=1326 audit(1790781308.687:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.0.732" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb03e82159 code=0x7ffc0000 [ 386.968438][ T26] audit: type=1326 audit(1790781308.687:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.0.732" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdb03e82159 code=0x7ffc0000 [ 387.001359][ T26] audit: type=1326 audit(1790781308.687:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.0.732" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb03e82159 code=0x7ffc0000 [ 387.150342][ T26] audit: type=1326 audit(1790781308.687:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.0.732" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fdb03e82159 code=0x7ffc0000 [ 387.220503][ T26] audit: type=1326 audit(1790781308.727:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.0.732" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb03e82159 code=0x7ffc0000 [ 388.328711][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.737'. [ 388.415684][ T6994] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input34 [ 389.435066][ T7007] overlayfs: failed to resolve './bus': -2 [ 389.485699][ T4260] libceph: connect (1)[c::]:6789 error -101 [ 389.540043][ T4260] libceph: mon0 (1)[c::]:6789 connect error [ 389.576677][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.742'. [ 389.610477][ T7003] ceph: No mds server is up or the cluster is laggy [ 390.426034][ T7010] loop3: detected capacity change from 0 to 128 [ 390.630349][ T7010] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc,,errors=continue. Quota mode: none. [ 390.676791][ T7010] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 390.882392][ T7010] syz.3.743 (pid 7010) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 392.872974][ T7050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.880829][ T7050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.889603][ T7044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.753'. [ 392.914324][ T7050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.921994][ T7050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.186764][ T7055] ceph: No mds server is up or the cluster is laggy [ 395.786667][ T21] libceph: connect (1)[c::]:6789 error -101 [ 395.794107][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 397.836040][ T7083] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input35 [ 398.445298][ T7092] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 400.102009][ T7093] loop1: detected capacity change from 0 to 128 [ 400.522048][ T7099] CIFS: Attempting to mount \\127.0.0.1\share [ 400.529981][ T7099] CIFS: VFS: Error connecting to socket. Aborting operation. [ 400.537663][ T7099] CIFS: VFS: cifs_mount failed w/return code = -101 [ 400.935516][ T4596] libceph: connect (1)[c::]:6789 error -101 [ 400.962635][ T7101] ceph: No mds server is up or the cluster is laggy [ 400.970049][ T7102] overlayfs: failed to resolve './bus': -2 [ 400.980493][ T4596] libceph: mon0 (1)[c::]:6789 connect error [ 401.294145][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.768'. [ 404.059243][ T7138] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 404.069222][ T7138] loop3: detected capacity change from 0 to 128 [ 404.906117][ T7138] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,delalloc,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 404.922553][ T7138] ext4 filesystem being mounted at /147/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 406.830328][ T21] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 406.879776][ T7156] overlayfs: missing 'lowerdir' [ 407.721186][ T4260] libceph: connect (1)[c::]:6789 error -101 [ 407.729566][ T4260] libceph: mon0 (1)[c::]:6789 connect error [ 407.756553][ T7155] ceph: No mds server is up or the cluster is laggy [ 407.762211][ T7157] overlayfs: failed to resolve './bus': -2 [ 408.004355][ T7166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.789'. [ 409.383193][ T21] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.450330][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 409.478375][ T21] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 409.494931][ T21] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 409.518066][ T21] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 409.537613][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.600421][ T21] usb 1-1: can't set config #1, error -71 [ 409.616570][ T21] usb 1-1: USB disconnect, device number 6 [ 411.098935][ T7190] loop4: detected capacity change from 0 to 32768 [ 411.107445][ T7194] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 411.117326][ T7194] loop2: detected capacity change from 0 to 128 [ 411.176666][ T7190] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.796 (7190) [ 413.261418][ T7198] loop3: detected capacity change from 0 to 1024 [ 413.274798][ T7190] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 413.283829][ T7190] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 413.293326][ T7190] BTRFS info (device loop4): use zstd compression, level 3 [ 413.300579][ T7190] BTRFS info (device loop4): force clearing of disk cache [ 413.307716][ T7190] BTRFS info (device loop4): enabling disk space caching [ 413.314986][ T7190] BTRFS info (device loop4): disk space caching is enabled [ 413.322470][ T7190] BTRFS info (device loop4): has skinny extents [ 413.371185][ T7194] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,delalloc,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 413.387540][ T7194] ext4 filesystem being mounted at /180/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 414.116601][ T7198] hfsplus: xattr searching failed [ 415.041690][ T7190] BTRFS error (device loop4): open_ctree failed: -12 [ 415.128033][ T7224] overlayfs: unrecognized mount option "/" or missing value [ 416.679750][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.802'. [ 416.817403][ T7245] overlayfs: failed to resolve './bus': -2 [ 418.277842][ T7258] 8021q: adding VLAN 0 to HW filter on device bond1 [ 418.290608][ T7246] netlink: 'syz.1.805': attribute type 4 has an invalid length. [ 418.306466][ T7246] netlink: 152 bytes leftover after parsing attributes in process `syz.1.805'. [ 418.342743][ T7246] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 418.365776][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.809'. [ 418.388684][ T7258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.809'. [ 418.419535][ T7258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.454055][ T7258] bond1: (slave bond0): making interface the new active one [ 418.644424][ T7258] bond1: (slave bond0): Enslaving as an active interface with an up link [ 418.730121][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 419.369559][ T7273] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 420.095711][ T7258] syz.2.809 (7258) used greatest stack depth: 18352 bytes left [ 422.505444][ T4589] libceph: connect (1)[c::]:6789 error -101 [ 422.511638][ T4589] libceph: mon0 (1)[c::]:6789 connect error [ 423.972648][ T7284] ceph: No mds server is up or the cluster is laggy [ 423.980296][ T4260] libceph: connect (1)[c::]:6789 error -101 [ 423.986288][ T4260] libceph: mon0 (1)[c::]:6789 connect error [ 424.000718][ T7304] overlayfs: failed to resolve './bus': -2 [ 425.146199][ T4260] libceph: connect (1)[c::]:6789 error -101 [ 425.282661][ T4260] libceph: mon0 (1)[c::]:6789 connect error [ 426.266664][ T7323] loop3: detected capacity change from 0 to 8 [ 426.388577][ T7323] SQUASHFS error: Unable to read directory block [631:26] [ 426.404508][ T7328] wlan0 speed is unknown, defaulting to 1000 [ 426.417742][ T7328] wlan0 speed is unknown, defaulting to 1000 [ 426.426634][ T7328] wlan0 speed is unknown, defaulting to 1000 [ 426.445044][ T7328] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 426.481189][ T7328] wlan0 speed is unknown, defaulting to 1000 [ 426.488662][ T7328] wlan0 speed is unknown, defaulting to 1000 [ 426.504496][ T7328] wlan0 speed is unknown, defaulting to 1000 [ 426.512956][ T7328] wlan0 speed is unknown, defaulting to 1000 [ 426.526648][ T7328] wlan0 speed is unknown, defaulting to 1000 [ 426.640641][ T7335] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 426.650660][ T7335] loop4: detected capacity change from 0 to 128 [ 429.895764][ T7335] EXT4-fs: failed to create workqueue [ 429.901366][ T7335] EXT4-fs (loop4): mount failed [ 429.925365][ T7347] CIFS: Attempting to mount \\127.0.0.1\share [ 430.169984][ T7357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.831'. [ 430.201627][ T7347] CIFS: VFS: Could not allocate crypto cmac(aes) [ 430.249931][ T7347] CIFS: VFS: cifs_mount failed w/return code = -512 [ 431.323251][ T21] libceph: connect (1)[c::]:6789 error -101 [ 431.342176][ T7383] overlayfs: failed to resolve './bus': -2 [ 431.357488][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 431.431556][ T7380] ceph: No mds server is up or the cluster is laggy [ 431.439274][ T21] libceph: connect (1)[c::]:6789 error -101 [ 431.571473][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 432.447772][ T21] libceph: connect (1)[c::]:6789 error -101 [ 432.478451][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 432.511696][ T7402] EXT4-fs (sda1): shut down requested (0) [ 433.416935][ T7391] overlayfs: unrecognized mount option "/" or missing value [ 433.855455][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.846'. [ 434.048560][ T7414] CIFS: Attempting to mount \\127.0.0.1\share [ 434.126025][ T7419] loop1: detected capacity change from 0 to 2048 [ 434.477069][ T7428] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 434.499794][ T7419] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none. [ 434.739354][ T7414] CIFS: VFS: cifs_mount failed w/return code = -112 [ 434.747773][ T7417] ================================================================== [ 434.756419][ T7417] BUG: KASAN: use-after-free in string+0x204/0x290 [ 434.763096][ T7417] Read of size 1 at addr ffff88805152fce0 by task cifsd/7417 [ 434.770526][ T7417] [ 434.772912][ T7417] CPU: 1 PID: 7417 Comm: cifsd Not tainted syzkaller #0 [ 434.779936][ T7417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 434.790056][ T7417] Call Trace: [ 434.793428][ T7417] [ 434.796450][ T7417] dump_stack_lvl+0x188/0x250 [ 434.801212][ T7417] ? show_regs_print_info+0x20/0x20 [ 434.806456][ T7417] ? _printk+0xda/0x130 [ 434.810645][ T7417] ? load_image+0x410/0x410 [ 434.815164][ T7417] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 434.820678][ T7417] ? lockdep_hardirqs_on+0x94/0x140 [ 434.825961][ T7417] print_address_description+0x60/0x2d0 [ 434.831537][ T7417] ? string+0x204/0x290 [ 434.835723][ T7417] kasan_report+0xdf/0x130 [ 434.840238][ T7417] ? string+0x204/0x290 [ 434.844418][ T7417] string+0x204/0x290 [ 434.848482][ T7417] vsnprintf+0x10db/0x1c20 [ 434.852936][ T7417] scnprintf+0xe5/0x180 [ 434.857148][ T7417] ? ret_from_fork+0x1f/0x30 [ 434.861765][ T7417] ? snprintf+0x140/0x140 [ 434.866148][ T7417] reconn_set_ipaddr_from_hostname+0x112/0x580 [ 434.872382][ T7417] ? cifs_mark_tcp_ses_conns_for_reconnect+0x13a0/0x13a0 [ 434.879438][ T7417] ? cgroup_freezing+0x264/0x310 [ 434.884438][ T7417] cifs_reconnect+0x470/0x1350 [ 434.889239][ T7417] ? inet_recvmsg+0x18b/0x200 [ 434.893946][ T7417] ? cifs_mount_params_proc_show+0x1a0/0x1a0 [ 434.899988][ T7417] ? inet_sendpage+0x2e0/0x2e0 [ 434.904785][ T7417] ? security_socket_recvmsg+0x85/0xb0 [ 434.910331][ T7417] ? sock_recvmsg+0x6f/0xf0 [ 434.914906][ T7417] cifs_readv_from_socket+0x7c4/0x8b0 [ 434.920323][ T7417] cifs_demultiplex_thread+0x53b/0x35b0 [ 434.925923][ T7417] ? cifs_resolve_server+0x110/0x110 [ 434.931243][ T7417] ? finish_lock_switch+0x12d/0x290 [ 434.936529][ T7417] ? lockdep_hardirqs_on+0x94/0x140 [ 434.941746][ T7417] ? finish_lock_switch+0x12d/0x290 [ 434.946969][ T7417] ? finish_task_switch+0x12f/0x650 [ 434.952254][ T7417] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 434.958311][ T7417] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 434.964226][ T7417] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 434.970138][ T7417] ? _raw_spin_unlock+0x40/0x40 [ 434.975045][ T7417] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 434.980970][ T7417] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 434.986897][ T7417] ? __kthread_parkme+0x14e/0x1b0 [ 434.992012][ T7417] kthread+0x42e/0x520 [ 434.996133][ T7417] ? cifs_resolve_server+0x110/0x110 [ 435.001439][ T7417] ? kthread_blkcg+0xd0/0xd0 [ 435.006049][ T7417] ret_from_fork+0x1f/0x30 [ 435.010516][ T7417] [ 435.013603][ T7417] [ 435.015953][ T7417] Allocated by task 7414: [ 435.020333][ T7417] __kasan_kmalloc+0xaf/0xe0 [ 435.024951][ T7417] kstrdup+0x32/0x70 [ 435.028871][ T7417] cifs_get_tcp_session+0xde/0x18f0 [ 435.034089][ T7417] mount_get_conns+0xc3/0xe00 [ 435.038806][ T7417] cifs_mount+0x162/0x1380 [ 435.043241][ T7417] cifs_smb3_do_mount+0x366/0x760 [ 435.048294][ T7417] smb3_get_tree+0x59a/0xa80 [ 435.052975][ T7417] vfs_get_tree+0x88/0x270 [ 435.057453][ T7417] do_new_mount+0x247/0xa40 [ 435.062015][ T7417] __se_sys_mount+0x2e3/0x3d0 [ 435.066721][ T7417] do_syscall_64+0x4c/0xa0 [ 435.071167][ T7417] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 435.077086][ T7417] [ 435.079418][ T7417] Freed by task 7414: [ 435.083566][ T7417] kasan_set_track+0x4b/0x70 [ 435.088177][ T7417] kasan_set_free_info+0x1f/0x40 [ 435.093137][ T7417] ____kasan_slab_free+0xd5/0x110 [ 435.098190][ T7417] slab_free_freelist_hook+0xec/0x170 [ 435.103584][ T7417] kfree+0xef/0x2a0 [ 435.107419][ T7417] cifs_put_tcp_session+0x2e1/0x3d0 [ 435.112657][ T7417] mount_put_conns+0xb0/0x270 [ 435.117356][ T7417] cifs_mount+0xbf5/0x1380 [ 435.121793][ T7417] cifs_smb3_do_mount+0x366/0x760 [ 435.126853][ T7417] smb3_get_tree+0x59a/0xa80 [ 435.131471][ T7417] vfs_get_tree+0x88/0x270 [ 435.136017][ T7417] do_new_mount+0x247/0xa40 [ 435.140546][ T7417] __se_sys_mount+0x2e3/0x3d0 [ 435.145244][ T7417] do_syscall_64+0x4c/0xa0 [ 435.149677][ T7417] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 435.155604][ T7417] [ 435.157952][ T7417] The buggy address belongs to the object at ffff88805152fce0 [ 435.157952][ T7417] which belongs to the cache kmalloc-16 of size 16 [ 435.171946][ T7417] The buggy address is located 0 bytes inside of [ 435.171946][ T7417] 16-byte region [ffff88805152fce0, ffff88805152fcf0) [ 435.184978][ T7417] The buggy address belongs to the page: [ 435.190619][ T7417] page:ffffea0001454bc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5152f [ 435.200812][ T7417] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 435.208382][ T7417] raw: 00fff00000000200 ffffea0001453340 0000001300000013 ffff888016c413c0 [ 435.216981][ T7417] raw: 0000000000000000 0000000000800080 00000001ffffffff 0000000000000000 [ 435.225579][ T7417] page dumped because: kasan: bad access detected [ 435.232023][ T7417] page_owner tracks the page as allocated [ 435.237770][ T7417] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4185, ts 108256558444, free_ts 108246796986 [ 435.253937][ T7417] get_page_from_freelist+0x24f6/0x2670 [ 435.259535][ T7417] __alloc_pages+0x1ee/0x480 [ 435.264145][ T7417] new_slab+0xb6/0x4b0 [ 435.268232][ T7417] ___slab_alloc+0x807/0xdd0 [ 435.272836][ T7417] __kmalloc_node+0x142/0x3a0 [ 435.277535][ T7417] kvmalloc_node+0x84/0x130 [ 435.282055][ T7417] xt_replace_table+0x160/0x750 [ 435.286975][ T7417] __do_replace+0x16f/0xa00 [ 435.291534][ T7417] do_ip6t_set_ctl+0xaa4/0xd90 [ 435.296327][ T7417] nf_setsockopt+0x25f/0x280 [ 435.301000][ T7417] ipv6_setsockopt+0x20ba/0x3cc0 [ 435.305994][ T7417] tcp_setsockopt+0x229/0x1e60 [ 435.310831][ T7417] __sys_setsockopt+0x2bf/0x3d0 [ 435.315730][ T7417] __x64_sys_setsockopt+0xb1/0xc0 [ 435.320791][ T7417] do_syscall_64+0x4c/0xa0 [ 435.325228][ T7417] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 435.331148][ T7417] page last free stack trace: [ 435.335838][ T7417] free_unref_page_prepare+0x637/0x6c0 [ 435.341325][ T7417] free_unref_page+0x8f/0x2a0 [ 435.346088][ T7417] __vunmap+0x8e0/0xa80 [ 435.350270][ T7417] free_work+0x56/0x80 [ 435.354351][ T7417] process_one_work+0x867/0xff0 [ 435.359221][ T7417] worker_thread+0xad7/0x12a0 [ 435.363912][ T7417] kthread+0x42e/0x520 [ 435.368080][ T7417] ret_from_fork+0x1f/0x30 [ 435.372545][ T7417] [ 435.374885][ T7417] Memory state around the buggy address: [ 435.380585][ T7417] ffff88805152fb80: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 435.388655][ T7417] ffff88805152fc00: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 435.396728][ T7417] >ffff88805152fc80: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 435.404808][ T7417] ^ [ 435.412011][ T7417] ffff88805152fd00: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 435.420143][ T7417] ffff88805152fd80: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 435.428214][ T7417] ================================================================== [ 435.436284][ T7417] Disabling lock debugging due to kernel taint [ 435.442503][ C1] vkms_vblank_simulate: vblank timer overrun [ 435.530324][ T7417] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 435.537644][ T7417] CPU: 0 PID: 7417 Comm: cifsd Tainted: G B syzkaller #0 [ 435.545998][ T7417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 435.556079][ T7417] Call Trace: [ 435.559378][ T7417] [ 435.562332][ T7417] dump_stack_lvl+0x188/0x250 [ 435.567032][ T7417] ? show_regs_print_info+0x20/0x20 [ 435.572252][ T7417] ? load_image+0x410/0x410 [ 435.576781][ T7417] panic+0x2f8/0x850 [ 435.580758][ T7417] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 435.586966][ T7417] ? bpf_jit_dump+0xd0/0xd0 [ 435.591510][ T7417] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 435.597527][ T7417] ? _raw_spin_unlock+0x40/0x40 [ 435.602405][ T7417] ? string+0x204/0x290 [ 435.606586][ T7417] check_panic_on_warn+0x80/0xa0 [ 435.611595][ T7417] ? string+0x204/0x290 [ 435.615780][ T7417] end_report+0x6d/0xf0 [ 435.619948][ T7417] kasan_report+0x102/0x130 [ 435.624467][ T7417] ? string+0x204/0x290 [ 435.628649][ T7417] string+0x204/0x290 [ 435.632664][ T7417] vsnprintf+0x10db/0x1c20 [ 435.637197][ T7417] scnprintf+0xe5/0x180 [ 435.641387][ T7417] ? ret_from_fork+0x1f/0x30 [ 435.646065][ T7417] ? snprintf+0x140/0x140 [ 435.650563][ T7417] reconn_set_ipaddr_from_hostname+0x112/0x580 [ 435.656739][ T7417] ? cifs_mark_tcp_ses_conns_for_reconnect+0x13a0/0x13a0 [ 435.663785][ T7417] ? cgroup_freezing+0x264/0x310 [ 435.668750][ T7417] cifs_reconnect+0x470/0x1350 [ 435.673554][ T7417] ? inet_recvmsg+0x18b/0x200 [ 435.678267][ T7417] ? cifs_mount_params_proc_show+0x1a0/0x1a0 [ 435.684270][ T7417] ? inet_sendpage+0x2e0/0x2e0 [ 435.689062][ T7417] ? security_socket_recvmsg+0x85/0xb0 [ 435.694547][ T7417] ? sock_recvmsg+0x6f/0xf0 [ 435.699064][ T7417] cifs_readv_from_socket+0x7c4/0x8b0 [ 435.704455][ T7417] cifs_demultiplex_thread+0x53b/0x35b0 [ 435.710043][ T7417] ? cifs_resolve_server+0x110/0x110 [ 435.715386][ T7417] ? finish_lock_switch+0x12d/0x290 [ 435.720607][ T7417] ? lockdep_hardirqs_on+0x94/0x140 [ 435.725835][ T7417] ? finish_lock_switch+0x12d/0x290 [ 435.731098][ T7417] ? finish_task_switch+0x12f/0x650 [ 435.736325][ T7417] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 435.742334][ T7417] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 435.748250][ T7417] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 435.754284][ T7417] ? _raw_spin_unlock+0x40/0x40 [ 435.759151][ T7417] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 435.765070][ T7417] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 435.771016][ T7417] ? __kthread_parkme+0x14e/0x1b0 [ 435.776053][ T7417] kthread+0x42e/0x520 [ 435.779234][ T26] audit: type=1800 audit(1790781359.127:27): pid=7419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.848" name="proc" dev="loop1" ino=18 res=0 errno=0 [ 435.780135][ T7417] ? cifs_resolve_server+0x110/0x110 [ 435.780157][ T7417] ? kthread_blkcg+0xd0/0xd0 [ 435.810154][ T7417] ret_from_fork+0x1f/0x30 [ 435.814594][ T7417] [ 435.817969][ T7417] Kernel Offset: disabled [ 435.822330][ T7417] Rebooting in 86400 seconds..